Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
File: Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft (raw, json)
Hash identifier: UNL/CozgydrzFKEEH09YmyRiSLCKYSDGJ1pcjfWR1gg=
Subject key identifier: 86:54:C5:42:8F:BD:0F:43:77:0B:29:C3:76:9C:93:61:07:81:FF:0F
Authority key identifier: 43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
Certificate issuer: /CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Certificate serial: 019A4C6144554B05FD3E3639917B44E00A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
Manifest number: 0B98
Signing time: Tue 04 Nov 2025 01:00:34 +0000
Manifest this update: Tue 04 Nov 2025 01:00:34 +0000
Manifest next update: Wed 05 Nov 2025 01:00:34 +0000
Files and hashes: 1: Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl (hash: yTuAV/oNJQmtwd+S+xvRiqFbffxcHQFSZ8rWMmsnLgU=)
2: rqFwpW6hygA3WlEvpR2r2eLIqwU.roa (hash: hJKMm6stZaqD+/5F5Zq5RhHhs3I7m3K3YzZ93XXb5tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:44:55:4b:05:fd:3e:36:39:91:7b:44:e0:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ac38878127cecdc4c83ea69eee1f4e118bcff
Validity
Not Before: Nov 4 01:00:34 2025 GMT
Not After : Nov 5 01:00:34 2025 GMT
Subject: CN=8654c5428fbd0f43770b29c3769c93610781ff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:00:91:10:81:7e:8d:7d:b1:b7:7b:32:d2:
b3:28:55:d5:ca:b8:9d:e8:a5:63:f4:d9:03:1b:2f:
30:fb:da:2a:ac:1c:f7:32:e9:51:61:2a:0d:1d:aa:
38:24:15:85:36:e2:a2:90:15:c4:a4:ad:a0:fa:bc:
44:09:e7:ec:f2:12:4e:27:31:ec:04:ab:fe:fa:52:
9b:c6:1e:10:15:fd:90:7d:53:1c:5a:7f:b5:d3:da:
af:01:dc:57:50:74:70:99:55:3c:81:f6:84:e9:e8:
ec:aa:89:20:a8:67:7d:ec:34:5c:4f:cf:c3:7b:bf:
94:e5:5e:e4:c5:36:e5:a8:07:3c:5b:65:43:bc:89:
90:58:31:f7:e5:fc:ea:dc:6f:6f:4a:78:37:15:9c:
c0:b2:00:d1:e7:05:56:4b:f3:a6:10:4c:3e:e1:14:
d8:b2:d3:6d:75:47:1d:ea:cf:82:ad:a1:0d:a3:e5:
28:7b:b0:ba:c4:2b:a0:39:eb:f2:97:41:5d:7b:11:
91:f9:6c:ac:8b:8c:c8:ad:7a:e8:ed:b0:ec:e0:49:
67:37:9b:97:d3:22:5c:e9:91:6e:e1:06:28:ec:a7:
1a:46:d7:5f:e7:8e:2a:78:ae:a9:df:b4:ad:7c:21:
2b:0b:b6:4c:1e:6f:4c:68:f5:9d:86:b2:34:d5:a4:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:C5:42:8F:BD:0F:43:77:0B:29:C3:76:9C:93:61:07:81:FF:0F
X509v3 Authority Key Identifier:
keyid:43:9A:C3:88:78:12:7C:EC:DC:4C:83:EA:69:EE:E1:F4:E1:18:BC:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5rDiHgSfOzcTIPqae7h9OEYvP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/26609f-2700-4949-8dbe-bae1f77ba758/1/Q5rDiHgSfOzcTIPqae7h9OEYvP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:6a:39:1f:4f:06:46:80:16:fb:40:6d:e1:32:74:16:7e:
59:67:03:47:9c:a8:25:3f:56:1a:4a:25:0b:3c:92:9f:cf:79:
d9:9e:9b:21:49:5d:92:5d:21:27:29:7f:32:d6:1e:64:ae:d7:
d9:c2:c2:ed:a7:f5:3f:89:0d:c0:98:13:53:fe:a8:bd:7a:42:
a3:ed:47:33:70:a8:8b:c0:81:7f:43:cb:71:23:5d:93:46:a4:
59:c9:92:41:fe:d1:fd:fc:7a:55:89:46:b0:8e:0b:81:3c:ba:
0d:93:c9:6e:28:2e:87:6f:d4:95:11:d2:a9:0f:6c:1d:0d:91:
9d:f2:f2:5d:de:ae:d4:cf:d9:84:67:99:90:cb:70:d8:96:65:
5a:de:03:a2:02:3c:09:77:28:1a:ce:0e:b6:3e:cc:a4:69:dd:
a9:4f:21:2d:0b:19:39:ce:83:52:f6:42:80:93:c4:1c:07:70:
84:9b:f9:6c:a8:3b:db:10:16:16:e3:55:1a:9e:09:53:be:dc:
3d:43:7e:20:0c:b7:89:46:16:86:89:12:ef:73:61:0b:22:6c:
eb:29:05:a3:09:74:6c:59:40:14:5b:b4:73:db:dc:61:9b:7f:
2e:b0:f2:d2:b4:08:fe:c2:98:a7:62:26:3e:99:c9:15:81:03:
8e:0a:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:34 2025 by rpki-client